Created
March 30, 2019 16:06
-
-
Save InspectorGadget/32c84d2459b5cc94c4f1071d9ff5a574 to your computer and use it in GitHub Desktop.
Police
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
ini_set('display_errors', 1); | |
ini_set('display_startup_errors', 1); | |
ini_set('max_execution_time', 300); //300 seconds = 5 minutes. In case if your CURL is slow and is loading too much (Can be IPv6 problem) | |
error_reporting(E_ALL); | |
define('OAUTH2_CLIENT_ID', '1234567890'); | |
define('OAUTH2_CLIENT_SECRET', 'verysecretclientcode'); | |
$authorizeURL = 'https://discordapp.com/api/oauth2/authorize'; | |
$tokenURL = 'https://discordapp.com/api/oauth2/token'; | |
$apiURLBase = 'https://discordapp.com/api/users/@me'; | |
session_start(); | |
// Start the login process by sending the user to Discord's authorization page | |
if(get('action') == 'login') { | |
$params = array( | |
'client_id' => OAUTH2_CLIENT_ID, | |
'redirect_uri' => 'https://yoursite.location/ifyouneedit', | |
'response_type' => 'code', | |
'scope' => 'identify guilds' | |
); | |
// Redirect the user to Discord's authorization page | |
header('Location: https://discordapp.com/api/oauth2/authorize' . '?' . http_build_query($params)); | |
die(); | |
} | |
// When Discord redirects the user back here, there will be a "code" and "state" parameter in the query string | |
if(get('code')) { | |
// Exchange the auth code for a token | |
$token = apiRequest($tokenURL, array( | |
"grant_type" => "authorization_code", | |
'client_id' => OAUTH2_CLIENT_ID, | |
'client_secret' => OAUTH2_CLIENT_SECRET, | |
'redirect_uri' => 'https://yoursite.location/ifyouneedit', | |
'code' => get('code') | |
)); | |
$logout_token = $token->access_token; | |
$_SESSION['access_token'] = $token->access_token; | |
header('Location: ' . $_SERVER['PHP_SELF']); | |
} | |
if(session('access_token')) { | |
$user = apiRequest($apiURLBase); | |
echo '<h3>Logged In</h3>'; | |
echo '<h4>Welcome, ' . $user->username . '</h4>'; | |
echo '<pre>'; | |
print_r($user); | |
echo '</pre>'; | |
} else { | |
echo '<h3>Not logged in</h3>'; | |
echo '<p><a href="?action=login">Log In</a></p>'; | |
} | |
if(get('action') == 'logout') { | |
// This must to logout you, but it didn't worked( | |
$params = array( | |
'access_token' => $logout_token | |
); | |
// Redirect the user to Discord's revoke page | |
header('Location: https://discordapp.com/api/oauth2/token/revoke' . '?' . http_build_query($params)); | |
die(); | |
} | |
function apiRequest($url, $post=FALSE, $headers=array()) { | |
$ch = curl_init($url); | |
curl_setopt($ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4); | |
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); | |
$response = curl_exec($ch); | |
if($post) | |
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($post)); | |
$headers[] = 'Accept: application/json'; | |
if(session('access_token')) | |
$headers[] = 'Authorization: Bearer ' . session('access_token'); | |
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers); | |
$response = curl_exec($ch); | |
return json_decode($response); | |
} | |
function get($key, $default=NULL) { | |
return array_key_exists($key, $_GET) ? $_GET[$key] : $default; | |
} | |
function session($key, $default=NULL) { | |
return array_key_exists($key, $_SESSION) ? $_SESSION[$key] : $default; | |
} | |
?> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment